Abstract:
In today's world of distributed environment, password authentication is very important to protect customer's sensitive data over Internet. The mainly two types of password are static password and dynamic password. Static passwords are highly susceptible to cracking, because passwords used will get cached on the hard drives. One Time Password (dynamic password) is a solution to solve the problems of static password. One Time Password is a password which changes every time the user logs in. Even if the attacker gets the password, it is useless to the attacker. This system is based on Lamport’s one time password scheme. Unlike Lamport’s scheme, new password initialization will depend on life-time and number of login (n) decided by Register Center. Diffie-Hellman Key Exchange Protocol will be used in this system for password initialization and the key exchange process of user’s password. This system will be developed in distributed environment with the aim of the users and servers’ mutual authentication.
